github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-27 17:39:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,448 Commits 342 Branches 538 Tags
dcd1b12bebf8c791c8bf5525d96524ea8923cc41
Commit Graph

8448 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Henry Mercer dcd1b12beb Simplify computation of job status 
- Move it out of the failed SARIF reporting so we compute the job status
whether or not we have a CodeQL config.
- Add comments to clarify what happens in the case that the CodeQL
config is absent.
 2026-01-23 17:07:21 +00:00
Henry Mercer 1601acf88b Merge pull request #3415 from github/henrymercer/address-telemetry-gap 
Address missing telemetry at the start of Actions
 2026-01-23 04:51:05 -08:00
Henry Mercer fba78720ca Address review comments 2026-01-23 12:22:31 +00:00
Henry Mercer a8dd5ab7a4 Merge pull request #3414 from github/dependabot/npm_and_yarn/lodash-4.17.23 
Bump lodash from 4.17.21 to 4.17.23
 2026-01-23 02:55:45 -08:00
Henry Mercer 28bfb7b7b5 Omit error from start-proxy Action 2026-01-23 10:42:42 +00:00
Henry Mercer 91f3460006 Throw if in test mode 2026-01-23 10:40:51 +00:00
Henry Mercer edebb7861e Differentiate unhandled errors in telemetry 2026-01-23 10:39:51 +00:00
Henry Mercer 529c266223 Use getErrorMessage in more places 2026-01-23 10:36:25 +00:00
Henry Mercer 6bd84b6a82 Rename to "unhandled" 2026-01-23 10:34:45 +00:00
Henry Mercer 5e98e18a17 Merge pull request #3410 from github/dependabot/npm_and_yarn/tar-7.5.6 
Bump tar from 7.4.3 to 7.5.6
 2026-01-22 05:15:39 -08:00
Henry Mercer 229e0cd749 Add catch-all error reporting for errors that slip through run 2026-01-22 13:14:53 +00:00
Henry Mercer 14bd76753f Add reminder to minimise code outside try/catch 2026-01-22 11:31:17 +00:00
Henry Mercer b715292b74 Move config saving within try-catch 2026-01-22 11:27:46 +00:00
Henry Mercer 7c72e12ecb Expand try-catch to cover more of Actions 2026-01-22 10:46:05 +00:00
dependabot[bot] b5bb69ad4b Bump lodash from 4.17.21 to 4.17.23 
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-22 00:26:32 +00:00
Michael B. Gale 1c4c0b36be Merge pull request #3318 from github/mbg/ignore-generated 2026-01-21 14:43:55 +00:00
Michael B. Gale bc75091173 Add empty lines to test cases 2026-01-21 13:29:15 +00:00
Michael B. Gale dc2428c879 Trim whitespace/remove empty lines 2026-01-21 13:27:47 +00:00
Michael B. Gale cb2dd2ed29 Add telemetry diagnostic 2026-01-21 13:22:01 +00:00
Michael B. Gale 9e2fa7419d Use joinAtMost for log message 2026-01-21 13:12:28 +00:00
Michael B. Gale 6a02be43ee Add joinAtMost utility function 2026-01-21 13:10:50 +00:00
dependabot[bot] e19f95e73f Bump tar from 7.4.3 to 7.5.6 
Bumps [tar](https://github.com/isaacs/node-tar) from 7.4.3 to 7.5.6.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.4.3...v7.5.6)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-21 12:56:03 +00:00
Michael B. Gale 4325937dc6 Merge pull request #3405 from github/mbg/ci/fix-concurrency-ignores-inputs 
Improve `concurrency` settings for PR checks
 2026-01-21 12:54:48 +00:00
Michael B. Gale d5b3d42fd4 Inline EnvVar.ANALYSIS_KEY in getAnalysisKey 2026-01-21 12:52:24 +00:00
Michael B. Gale 417a8c2176 Merge branch 'main' into mbg/ignore-generated 2026-01-21 12:44:35 +00:00
Michael B. Gale fa03060d60 Update new CCR workflow 2026-01-21 12:33:08 +00:00
Michael B. Gale f58cb3d53e Improve comment for concurrency settings 2026-01-21 12:33:02 +00:00
Michael B. Gale 51975ff7b7 Merge branch 'main' into mbg/ci/fix-concurrency-ignores-inputs 2026-01-21 12:28:09 +00:00
Henry Mercer 32d41f36fe Merge pull request #3403 from github/henrymercer/abridge-release-notes 
Abridge release notes
 2026-01-20 06:26:19 -08:00
Michael B. Gale d60bbdfd70 Merge pull request #3409 from github/mbg/start-proxy/make-unique-artifact 
Ensure that proxy log artifacts have unique names
 2026-01-20 14:24:28 +00:00
Henry Mercer 93a99bf571 Merge pull request #3404 from github/henrymercer/include-oids-in-bundle 
Include base database OIDs when bundling database
 2026-01-20 06:13:13 -08:00
Michael B. Gale dce83e1c1e Merge pull request #3408 from github/mbg/add-ccr-check 
Add basic PR check with CCR-like environment
 2026-01-20 14:04:13 +00:00
Henry Mercer ec4eda1b42 Just link the release notes 2026-01-20 14:00:21 +00:00
Michael B. Gale 1df1c9f85d Include expected suffixes in test 2026-01-20 13:55:25 +00:00
Michael B. Gale 9483bd5a7f Check that matrixObject is an object 2026-01-20 13:51:59 +00:00
Henry Mercer b880a1a7bd Improve comment 2026-01-20 13:45:41 +00:00
Henry Mercer 5ac04769eb Rename argument 2026-01-20 13:39:43 +00:00
Michael B. Gale 1ac62705ed Change log message to warning 2026-01-20 13:25:25 +00:00
Michael B. Gale 9a57e78a04 Improving sorting of matrix keys 2026-01-20 13:21:16 +00:00
Michael B. Gale 7e96d45489 Use uploadArtifacts for start-proxy post action 2026-01-20 12:52:35 +00:00
Michael B. Gale 13eb1818b9 Refactor generic part of uploadDebugArtifacts into uploadArtifacts 2026-01-20 12:49:19 +00:00
Michael B. Gale f950f7f442 Add unit tests for getArtifactSuffix 2026-01-20 12:41:35 +00:00
Michael B. Gale 69173ea009 Refactor artifact suffix computation into getArtifactSuffix 2026-01-20 12:41:22 +00:00
Michael B. Gale a886c30690 Add basic PR check with CCR-like environment 2026-01-20 12:19:29 +00:00
Michael B. Gale 044ff10e29 Merge pull request #3406 from github/dependabot/npm_and_yarn/npm-minor-e76a272df4 
Bump the npm-minor group with 4 updates
 2026-01-20 11:18:45 +00:00
Michael B. Gale 84edfc05fa Merge pull request #3407 from github/dependabot/github_actions/dot-github/workflows/actions-minor-ec7bddb364 
Bump ruby/setup-ruby from 1.281.0 to 1.284.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-01-20 11:16:49 +00:00
github-actions[bot] df0cc0ca39 Rebuild 2026-01-19 19:40:50 +00:00
dependabot[bot] 24f1cbdafb Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.281.0 to 1.284.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/675dd7ba1b06c8786a1480d89c384f5620a42647...80740b3b13bf9857e28854481ca95a84e78a2bdf)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.284.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-19 19:39:18 +00:00
github-actions[bot] 8881a4160f Rebuild 2026-01-19 19:34:41 +00:00
dependabot[bot] 1191c09db6 Bump the npm-minor group with 4 updates 
Bumps the npm-minor group with 4 updates: [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) and [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc).


Updates `@actions/cache` from 5.0.2 to 5.0.3
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache)

Updates `@typescript-eslint/eslint-plugin` from 8.53.0 to 8.53.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.53.0 to 8.53.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.1/packages/parser)

Updates `eslint-plugin-jsdoc` from 62.0.0 to 62.2.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v62.0.0...v62.2.0)

---
updated-dependencies:
- dependency-name: "@actions/cache"
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.53.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.53.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-19 19:33:09 +00:00